Ethical Hacking News
Deception Behind the Shield: A new report reveals the shocking truth about fake ransomware recovery companies like MonsterCloud, which secretly paid ransomware demands behind clients' backs. The owner, Zohar Pinhasi, has been charged with wire fraud and faces up to 20 years in prison if convicted. Learn more about this case and the importance of transparency and accountability in the cybersecurity industry.
MonsterCloud's owner, Zohar Pinhasi, has been accused of secretly paying ransomware demands behind clients' backs and charging them millions for the supposed recovery. Pinhasi used multiple aliases and claimed to have proprietary tools and advanced decryption techniques to deceive clients. The scheme collected over $19 million from clients, with Pinhasi pocketing the difference between the ransom paid and the amount he charged. The incident highlights the importance of being cautious when dealing with ransomware recovery companies and the need for greater transparency and accountability in the industry. Even "ethical" recovery firms can be complicit in exploiting ransomware victims, and clients should always be vigilant when dealing with these services.
MonsterCloud, a Florida-based company, has been accused of secretly paying ransomware demands behind clients' backs, only to charge them millions for the supposed recovery. The owner, Zohar Pinhasi, has been charged with wire fraud and faces up to 20 years in prison if convicted.
According to the indictment, Pinhasi used multiple aliases, including "Zack Silver" and "Zack Green," to run his company. He claimed to have proprietary tools and advanced decryption techniques that allowed him to crack ransomware without negotiating with attackers. However, it was discovered that he had none of these tools and instead paid the ransom demands and used the decryption key to recover the data, presenting it as his own work.
The scheme allegedly collected over $19 million from clients, with Pinhasi pocketing the difference between the ransom paid and the amount he charged. The victims were left with the added burden of dealing with the original ransomware attack, as well as the realization that their "ethical" recovery firm had secretly paid the attackers.
The case highlights the importance of being cautious when dealing with ransomware recovery companies. Pinhasi's use of fake tools and services was designed to deceive clients and take advantage of their desperation. The FBI and CISA have clear guidance on ransomware payments, warning that paying does not guarantee the data will be decrypted, the attackers will leave the network, or the stolen data will not be leaked.
The incident also underscores the need for greater transparency and accountability in the cybersecurity industry. Companies should be transparent about their methods and tools, and clients should be wary of services that seem too good to be true. The consequences of such deception can be severe, as seen in Pinhasi's case.
The incident has also raised concerns about the exploitation of ransomware victims, who are already dealing with the emotional and financial trauma of being extorted. The case serves as a reminder that even "ethical" recovery firms can be complicit in this exploitation, and that clients should always be vigilant when dealing with these services.
In conclusion, the case of MonsterCloud's Zohar Pinhasi serves as a warning to the cybersecurity industry and to clients alike. The use of fake tools and services to deceive clients and take advantage of their desperation is a serious offense that can have severe consequences. As the industry continues to evolve, it is essential that companies prioritize transparency and accountability, and that clients remain vigilant in their dealings with ransomware recovery firms.
Related Information:
https://www.ethicalhackingnews.com/articles/Deception-Behind-the-Shield-The-Rise-of-Fake-Ransomware-Recovery-Companies-ehn.shtml
https://securityaffairs.com/200621/cyber-crime/monstercloud-owner-charged-with-secretly-paying-ransomware-demands.html
https://www.justice.gov/opa/pr/known-cybersecurity-expert-and-owner-florida-ransomware-remediation-company-charged
Published: Thu Oct 8 09:57:23 2026 by llama3.2 3B Q4_K_M
